Private by default
Every personal chat and group is locked before it leaves your phone or computer. Only the people in that chat have the keys. Not Pigeon. Not Kastia. Not a stranger on a server.
Kastia · Closed beta
Pigeon is a place to talk with the people you care about. Your words are locked on your device before they go anywhere. We cannot read them. Advertisers cannot either.
Free to try. Android and iPhone builds are next. No ads. No selling your chats. Delete your account anytime in Settings — on Windows, Android, iPhone, and Mac.
You should not need a computer science degree to have a private conversation. Pigeon feels like the messengers you already know — quieter, and more careful with your words.
Every personal chat and group is locked before it leaves your phone or computer. Only the people in that chat have the keys. Not Pigeon. Not Kastia. Not a stranger on a server.
Chats, contacts, photos, stickers, and groups — without noisy ads or public feeds. Open it, find the person, say what you meant to say. Privacy policy, terms, and account deletion are in Settings on every platform.
If the internet drops, Nearby can pass locked messages between Pigeon phones that are close — or through other Pigeon users in between. A concert, a storm, a dead zone: you can still reach someone in the room.
Your words stay yours
Think of a letter in a sealed envelope that only your friend can open. Pigeon writes that seal on your device. We carry the envelope. We never hold the letter.
Alerts on your lock screen say only “New message.” They never quote the text. Backups use a passphrase you choose — it never leaves your device.
We still need a username, and an email so we can send a sign-in code. We can see that a message was delivered, roughly when, and to which chat. We do not sell that. We cannot read the contents. Technical detail
Alerts say only “New message.” They never quote the text. The letter stays in the envelope.
When the network fails
Bluetooth only reaches about the length of a large room. Pigeon can hop through other people who also have Nearby on — a hallway, a festival crowd, a family in the same house.
It will not find a phone across the city on its own. We would rather tell you that plainly than promise a worldwide tracking network we do not have. You turn Nearby on when you want it.
Internet is the highway. Nearby is walking a note to the next person, still in a locked envelope. Same letter. Different road.
One Pigeon on Windows, Android, iPhone, and Mac. Same daylight-steel and night-sky look. Your keys stay on devices you trust. Settings → Delete account works on all of them.
Same app, including Settings → Delete account, when it ships.
Closed beta. Same app, including account deletion, when Play / APK is posted.
Ready today. Includes Settings → Delete account.
Same app, including Settings → Delete account.
Families, clubs, and quiet broadcasts — still locked on the devices in the conversation.
Plan a dinner or keep a family thread. Roles let you decide who can add people. Everyone in the group can read the chat. Nobody outside it — including us — can.
One place to post updates that many people can follow. Posts are still sealed; we store locked copies, not readable text.
Pictures and files are locked on your device before upload. We cannot preview your photos.
Three steps. No special hardware.
Use the Windows download today. Open it like any other app. You do not need an admin password.
We email a short code, or you can continue with Google. Then pick a username people can find.
Search a username, start a chat, send a photo. From that moment the conversation is locked on both sides.
No. Private chats, groups, channels, stickers, and files are sealed on your device. Our servers keep locked envelopes. We cannot open them.
No ads in the app. We do not sell your messages — we cannot read them to sell. An optional Plus plan pays for extra space and limits, not for weaker privacy.
A username, display name, optional photo, the email (or phone) used to sign in, device names, and which chats you belong to. Full detail is in the privacy policy.
On Windows, Android, iPhone, and Mac: open Pigeon → Settings → Delete account, then type your username to confirm. That removes the server account and wipes this device. If you cannot open the app, follow the privacy policy or email [email protected].
Open their profile (or a group member) and choose Report or Block. A report emails [email protected] with account details and your reason — not chat text, because we cannot read end-to-end encrypted messages. Block hides their 1:1 chat on this device only.
Not yet. Pigeon is in closed beta. Things will change. If something feels off, write [email protected].
Voice and video are not in this version. Messaging, photos, groups, and Nearby come first.
Windows is ready now. Keep the file. Run the installer. Pin it if you like it. Windows Defender may warn until we finish code-signing — choose More info, then Run anyway.
Pigeon 0.1.0 (build 4) for PCs. Includes Delete account, report, and block. The installer can update itself later.
Download Pigeon-Setup.exeClosed beta. Same Pigeon, including Settings → Delete account, when Play / APK is posted.
Coming soonNeeds an Apple developer listing. Same private chats and in-app account deletion when it ships.
Coming soon